Go modules · #1004 by repository stars

github.com/bogdanfinn/tls-client

v1.16.0bogdanfinn/tls-client ↗New releases in your daily digest, changelog included.

Last release 1 months ago
04 Sep 2026
Release timing varies
gaps range from 9 days to 2 months
Rarely documented
notes for 11 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
4 years old
230 releases · first in 2022

Release timeline

230 releases since 2022

20222023202420252026

20222026

One column per quarter.

Releases

v1.16.1-0.20260904075740-34718e1b514b4 Sept 2026pre-release
Nothing published for this version
v1.16.1-0.20260904073031-ab95f96277424 Sept 2026pre-release
Nothing published for this version
v1.16.1-0.20260902143812-67d8b80c31db2 Sept 2026pre-release
Nothing published for this version
v1.16.02 Sept 2026
Do not reuse a cached transport when ALPN changed on reconnect by @Mootjelh in #266

What's Changed

Chrome150 by @combo23 in #259
Do not reuse a cached transport when ALPN changed on reconnect by @Mootjelh in #266
Add Chrome 152 and Chrome 152 PSK profiles, trust_anchors payload, tests by @nihiloid in #265
disable session tickets by @aarock1234 in #225
refs #242: implemented proxy support for http3 by @bogdanfinn in #269

New Contributors

@Mootjelh made their first contribution in #266

Breaking Changes

Protocol racing with a non-SOCKS5 proxy is now rejected with a config error, at client creation and on SetProxy. Only SOCKS5 can tunnel UDP, so with any other scheme the HTTP/3 leg went out directly and leaked your real IP. Use a socks5:// proxy, or disable protocol racing or HTTP/3.
Default client profile changed from Chrome 146 to Chrome 150.
GetSpecFactoryFromJa3String takes an additional trustAnchorsPayload string as its last parameter. Pass "" to keep the previous behaviour. Go callers only; the shared library reads it from the new customTlsClient field.

New Features

HTTP/3 through SOCKS5 proxies via UDP ASSOCIATE
WithDisableSessionTickets — disables TLS session ticket caching and resumption
Header-Order: is now honored for regular request headers over HTTP/3
ML-DSA signature verification for TLS 1.3
profiles.BuildTrustAnchorsPayload for custom profiles that build the trust_anchors extension by hand

New Profiles

Chrome 150 (chrome_150) & Chrome 150 PSK (chrome_150_PSK)
Chrome 152 (chrome_152) & Chrome 152 PSK (chrome_152_PSK)

Shared Library & Standalone API

New payload field disableSessionTickets
New customTlsClient field trustAnchorsPayload, required when your ja3String lists extension 51764
supportedSignatureAlgorithms now accepts MLDSA44, MLDSA65, MLDSA87 and GREASE
chrome_150, chrome_150_PSK, chrome_152 and chrome_152_PSK work without any payload change

Bug Fixes

Cached transports are rebuilt when a server negotiates a different ALPN protocol on reconnect
isByteResponse no longer returns an empty body
Header order is no longer corrupted by a pooled sorter reused from an earlier ordered write
Large downloads with a slow reader no longer fail with FLOW_CONTROL_ERROR
Writing headers no longer mutates the caller's exclude map, and the process-global header mutex is gone
The HPACK encoder honors the peer's SETTINGS_HEADER_TABLE_SIZE, capped at 4096
Decompressing TLS certificates uses io.ReadFull, fixing short reads

Performance

gzip and flate decompression use klauspost/compress, with gzip readers recycled across responses
HTTP/2 header encoding clones, augments and sorts once instead of repeatedly
Header order lookups are cached instead of resolved per comparison

Known Issues
Both only affect clients that actually use HTTP/3, so a client without WithProtocolRacing() is unaffected.

Only chrome_144, chrome_144_PSK, firefox_147, firefox_147_PSK and firefox_148 carry HTTP/3 settings. Every other profile sends a minimal SETTINGS frame that does not match the browser it imitates. TLS and HTTP/2 fingerprints are unaffected. Use one of those five profiles or set WithDisableHttp3() if the HTTP/3 fingerprint matters.
Both racing legs share one *http.Request, which is a data race on the header map. It shows up once many requests race at the same time and can crash the process. Prefer WithDisableHttp3() for high concurrent volume.

Full Changelog: v1.15.1...v1.16.0

Open source →

v1.15.2-0.20260902130118-291b8f9e1b862 Sept 2026pre-release

Nothing published for this version

v1.15.2-0.20260902100909-e6504426bbc42 Sept 2026pre-release

Nothing published for this version

v1.15.2-0.20260902072728-72add196defa2 Sept 2026pre-release

Nothing published for this version

v1.15.2-0.20260902072107-93b4168e04d02 Sept 2026pre-release

Nothing published for this version

v1.15.2-0.20260702071810-b790a311273f2 Jul 2026pre-release

Nothing published for this version

v1.15.2-0.20260608195153-1522d2e36f598 Jun 2026pre-release

Nothing published for this version

v1.15.18 Jun 2026

Fixed an issue with isByteResponse=true body reading in shared library and tls-client-api

Fixed an issue with isByteResponse=true body reading in shared library and tls-client-api

Full Changelog: v1.15.0...v1.15.1

Open source →

v1.15.1-0.20260605190820-5cc3ab9c7f905 Jun 2026pre-release

Nothing published for this version

v1.15.04 Jun 2026

Add WithDialContext option for custom socket and DNS management (re-add WithInitialStreamID, WithAllowHTTP) by @gunir in #218

What's Changed

Add WithDialContext option for custom socket and DNS management (re-add WithInitialStreamID, WithAllowHTTP) by @gunir in #218
feat: prerequest hooks n postrequest hooks by @combo23 in #220
Fix client_options syntax error caused build failing by @patyhank in #222
omit nil check for maps in roundtripper.go; len() for nil maps is defined as zero by @aarock1234 in #224
Automatic Charset Detection of Response Body by @DemBackfisch in #227
fix: header order for websockets by @combo23 in #230
Fix EOF errors caused by the charset reader in factory.go by @DemBackfisch in #232
Add Firefox 148 and Firefox 148 PSK profiles FROM TLS.PEET.WS by @generalregulator in #234
Add support for Firefox 148 profile by @generalregulator in #238
Remove FIREFOX 148 PSK since it is not working by @generalregulator in #239
Add support for Brave Browser 146 profile by @sbyt3 in #241
fix: don't send H3 SETTINGS_MAX_FIELD_SECTION_SIZE for Firefox profiles by @z9z in #249
fix: http2Conn.Close should return both errors by @z9z in #248
add client certificate support by @dxasm in #244
Update DefaultClientProfile to Chrome_146 by @lnstchtped in #243
fix: close idle connections when clearing session cache by @daiaji in #252
fix: guard against nil logger before constructing proxy dialer by @desperatee in #250
fix: connection leak & logging format by @combo23 in #254

New Contributors

@combo23 made their first contribution in #220
@patyhank made their first contribution in #222
@aarock1234 made their first contribution in #224
@generalregulator made their first contribution in #234
@sbyt3 made their first contribution in #241
@z9z made their first contribution in #249
@dxasm made their first contribution in #244
@lnstchtped made their first contribution in #243
@daiaji made their first contribution in #252
@desperatee made their first contribution in #250

Full Changelog: v1.14.0...v1.15.0

Open source →

v1.14.1-0.20260702071810-b790a311273f2 Jul 2026pre-release

Nothing published for this version

v1.14.1-0.20260604053644-f768f95a757b4 Jun 2026pre-release

Nothing published for this version

v1.14.1-0.20260525085837-0dee514a01fa25 May 2026pre-release

Nothing published for this version

v1.14.1-0.20260508063638-ac98975bd0998 May 2026pre-release

Nothing published for this version

v1.14.1-0.20260329211727-a57772fb150c29 Mar 2026pre-release

Nothing published for this version

v1.14.1-0.20260319111818-ed6427f96a3d19 Mar 2026pre-release

Nothing published for this version

v1.14.1-0.20260319110020-474eb8d2f42a19 Mar 2026pre-release

Nothing published for this version

v1.14.1-0.20260318195037-82a0cb5f77f218 Mar 2026pre-release

Nothing published for this version

v1.14.1-0.20260312091015-d0fc5950a91412 Mar 2026pre-release

Nothing published for this version

v1.14.1-0.20260303083204-3807c967d5bb3 Mar 2026pre-release

Nothing published for this version

v1.14.1-0.20260226065204-674eaed2482226 Feb 2026pre-release

Nothing published for this version

v1.14.1-0.20260213101116-f081b531898513 Feb 2026pre-release

Nothing published for this version

v1.14.1-0.20260209135312-07c86797ccb99 Feb 2026pre-release

Nothing published for this version

v1.14.1-0.20260206133151-72504946a8006 Feb 2026pre-release

Nothing published for this version

v1.14.1-0.20260206090823-a3537d6cd9ce6 Feb 2026pre-release

Nothing published for this version

v1.14.1-0.20260204075305-f4a46b29c0514 Feb 2026pre-release

Nothing published for this version

v1.14.03 Feb 2026

refs #95 : implemented websocket support; by @bogdanfinn in #208

What's Changed

refs #95: implemented websocket support; by @bogdanfinn in #208
Update contributed_browser_profiles.go - Add Firefox 146, 147 by @gunir in #209
Add EUC-KR encoding for Korean by @ahnse0 in #207
feat: HTTP/3 fingerprinting for Chrome 144 and Firefox 147 by @bogdanfinn in #215
Add Safari iOS 26.0, Chrome 146, Chrome 146 PSK, tests by @nihiloid in #214
[Bug]: ipv6 url error by @zephyr-profile in #212
fixed websocket connection; by @bogdanfinn in #216
print detected pins in error message in case of "bad ssl pin detected" by @AndreaVitale in #217

New Contributors

@ahnse0 made their first contribution in #207
@zephyr-profile made their first contribution in #212
@AndreaVitale made their first contribution in #217

Full Changelog: v1.13.1...v1.14.0

Open source →

v1.13.2-0.20260203151147-725955a87b543 Feb 2026pre-release

Nothing published for this version

v1.13.2-0.20260126081310-f85e5c27f96b26 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260126073945-635d5fa49b5826 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260126073828-9046b9d3ce1d26 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260121072726-145b2fdcf1c721 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260116083719-2d4093b9354b16 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260116083537-41acb742303216 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260111193008-e129d5aebc0311 Jan 2026pre-release

Nothing published for this version

v1.13.2-0.20260110153201-9e9faaf03bf110 Jan 2026pre-release

Nothing published for this version

v1.13.110 Jan 2026

Add AllowHTTP, set StreamID value by @gunir in #205 fixed #194

What's Changed

Add AllowHTTP, set StreamID value by @gunir in #205 fixed #194
fixes #191: fixed correct usage of PSK (41) extension in chrome_133;
implemented chromes happy eyeballs approach to determine which protocol to use for http3;

options := []tls_client.HttpClientOption{
        tls_client.WithClientProfile(profiles.Chrome_133),
        tls_client.WithProtocolRacing(),
    }

see https://github.com/bogdanfinn/tls-client/blob/master/tests/http3_chrome_cloudflare_test.go

New Contributors

@gunir made their first contribution in #205

Full Changelog: v1.12.0...v1.13.1

Open source →

v1.13.1-0.20260121072726-145b2fdcf1c721 Jan 2026pre-release

Nothing published for this version

v1.13.1-0.20260110151142-264f9a97558c10 Jan 2026pre-release

Nothing published for this version

v1.13.010 Jan 2026

implemented chromes happy eyeballs approach to determine which protoc…

Open source →

v1.12.1-0.20260110144418-8eb3c52ffd2f10 Jan 2026pre-release

Nothing published for this version

v1.12.1-0.20251225205701-1223f684b08025 Dec 2025pre-release

Nothing published for this version

v1.12.025 Dec 2025Breaking

Breaking Change: Changed Default cookiejar to be used in API to jar, _ := cookiejar.New(nil) and not tls_client.NewCookieJar(jarOptions...) anymore.

What's Changed

Add 'keep_compressed' test by @ypapouski in #201
Updated to latest quic-go by @snekROmonoro
Implemented support for socks4 Proxies
Updated utls on the latest changes from refraction-networking/utls
Breaking Change: Changed Default cookiejar to be used in API to jar, _ := cookiejar.New(nil) and not tls_client.NewCookieJar(jarOptions...) anymore.

The payload to be sent via the API / Shared library is now:

   "withoutCookieJar": false | true, <- Disable Cookiejar completely
   "withCustomCookieJar": false | true, <- Use "old" tls_client Cookiejar.

New Contributors

@ypapouski made their first contribution in #201

Full Changelog: v1.11.2...v1.12.0

Open source →

v1.11.3-0.20251103213455-f7d4154ba34b3 Nov 2025pre-release

Nothing published for this version

v1.11.3-0.20250921205940-06f597ec223421 Sept 2025pre-release

Nothing published for this version

v1.11.3-0.20250911220559-620da6615a0011 Sept 2025pre-release

Nothing published for this version

v1.11.211 Sept 2025

Switched https://github.com/Dharmey747/quic-go-utls to https://github.com/bogdanfinn/quic-go-utls fork

Switched https://github.com/Dharmey747/quic-go-utls to https://github.com/bogdanfinn/quic-go-utls fork
Added option to disable http3

Full Changelog: v1.11.1...v1.11.2

Open source →

v1.11.111 Sept 2025

switched quic-go-utls fork from dharmey to own;

switched quic-go-utls fork from dharmey to own; (#195)

Open source →

v1.11.1-0.20250731213017-974499ad9c5731 Jul 2025pre-release

Nothing published for this version

v1.11.1-0.20250718205623-4f692401bca518 Jul 2025pre-release

Nothing published for this version

v1.11.018 Jul 2025

HTTP3 (QUIC) Support ( #104 ) by @Dharmey747 in #189

What's Changed

HTTP3 (QUIC) Support (#104) by @Dharmey747 in #189

Full Changelog: v1.10.0...v1.11.0

Open source →

v1.10.1-0.20260121072726-145b2fdcf1c721 Jan 2026pre-release

Nothing published for this version

v1.10.1-0.20250718202502-c162eebc416018 Jul 2025pre-release

Nothing published for this version

v1.10.1-0.20250718202138-f2deda34dcec18 Jul 2025pre-release

Nothing published for this version

v1.10.1-0.20250617075325-1655cdb30be817 Jun 2025pre-release

Nothing published for this version

v1.10.017 Jun 2025

Updated utls dependency. utls fork was rebased on latest https://github.com/refraction-networking/utls

Updated utls dependency. utls fork was rebased on latest https://github.com/refraction-networking/utls
Updated go version to 1.24

Full Changelog: v1.9.2...v1.10.0

Open source →

v1.9.3-0.20260702071810-b790a311273f2 Jul 2026pre-release

Nothing published for this version

Your coding agent can read these notes before it upgrades. Set up the MCP server →